Data protection

• the administration of our corporate functions
  
  
• personal data contained in our archive collections

The NAS seeks to enshrine this in our data protection policy and our own procedures for handling personal data. The 8 data protection principles are an integral part of the data protection regime and give an oversight of the aims and reasons behind the act. We aim to ensure that any personal data which we hold as an organisation remains accurate, up to date, secure and that it is processed in accordance with the provisions of the Act. The Act is administered and enforced by the Information Commissioner - an independent authority reporting directly to parliament.

The rights of data subjects (individuals on whom information is held) whether as clients or individuals whose data is contained within record collections or as employees of the NAS, must all be recognised and easily accessible. A standard form and background information are available to deal with subject access requests.

The Act also covers areas CCTV monitoring which the NAS undertakes and the processing of personal information held not only in the administration of our corporate duties but with the archive material we hold and is comprehensively covered under the NAS Code of Practice on Data Protection.